Back Linuxsecurity

Fedora 43 xrdp Urgent Security Update Notice FEDORA-2026

Linuxsecurity •LinuxSecurity Advisories • July 16, 2026

Release notes for xrdp v0.10.6.1 (2026/07/06) General announcements This release fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in the release. If you like xrdp, please consider sponsoring or donating to the project. We accept financial contributions through Open Collective, and direct donations to individual developers via GitHub Sponsors are also welcome. Security fixes CVE-2026-41252 CVE-2026-41521 CVE-2026-44178 CVE-2026-42218 CVE-2026-44978 CVE-2026-54538 CVE-2026-55238 CVE-2026-55626 CVE-2026-55639 CVE-2026-55645 New features None Bug fixes regression: Fix SEGV in xrdp when running over TLS (#3793)

* Tue Jul 7 2026 Bojan Smojver - 1:0.10.6.1-1 - Update to 0.10.6.1 - CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218 - CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626 - CVE-2026-55639, CVE-2026-55645 * Sat Jun 13 2026 Yaakov Selkowitz - 1:0.10.6-3 - Rebuilt for openssl 4.0

Fedora Update Notification FEDORA-2026-bd0a75766f 2026-07-16 01:28:35.510767+00:00 Name : xrdp Product : Fedora 43 Version : 0.10.6.1 Release : 1.fc43 URL : Summary : Open source remote desktop protocol (RDP) server Description : xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-bd0a75766f' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora xrdp Security Update Addresses 10 Vulnerabilities On July 6, 2026, an update for xrdp version 0.10.6.1 was released, fixing 10 vulnerabilities and one regression. The vulnerabilities include CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218, CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626, CVE-2026-55639, and CVE-2026-55645. Affected systems include Fedora 43 and Fedora 44. The update addresses a segmentation fault (SEGV) issue when running over TLS. Users are advised to upgrade using the dnf update program. The vulnerabilities are significant but have been patched, reducing the immediate risk. The updates were announced on July 16, 2026, with a reminder for users to apply the patches promptly. 2 sources 61

Extracted Entities

CVEs (10)

CVE-2026-41252 CVE-2026-41521 CVE-2026-42218 CVE-2026-44178 CVE-2026-44978 CVE-2026-54538 CVE-2026-55238 CVE-2026-55626 CVE-2026-55639 CVE-2026-55645

Platforms (1)

Linux